Answers whether a presented chain is revoked, and applies the policy.
The one function every door asks. A foreign certificate is looked up at its OCSP responder and CRL only when the chain verified. Never rejects.
{ leaf, chain, verified }
optional; external: 'not-consulted' fetches nothing
external: 'not-consulted'
the decided verdict: status, refused, policy, why, links, unknown and revoked, marked with its refusal code when refused
status
refused
policy
why
links
unknown
revoked
Answers whether a presented chain is revoked, and applies the policy.
The one function every door asks. A foreign certificate is looked up at its OCSP responder and CRL only when the chain verified. Never rejects.